FileManageMCP

The server implements robust security features: a default-enabled 'Dry Run' mode, a configurable sandbox to restrict operations to a defined workspace (`MCP_FILE_AGENT_ROOT`), and explicit blacklisting of critical system paths (`C:\Windows`, `Program Files`, `.git`, `node_modules`). All file operations are guarded by path validation. No 'eval' or direct 'subprocess' calls beyond standard file operations (move, rename, create). Filename sanitization is also implemented. The main risk is the inherent nature of a tool performing file system modifications, but the safeguards are well-designed to prevent accidental or malicious actions.